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Abstract 

Let §2 be the p-primary second Morava stabilizer group, C a supersingular elliptic 
curve over Fp, O the ring of endomorphisms of C, and H. a topological generator of 
(respectively 1^ /{±1} if p = 2). We show that for p > 2 the group T C 0[l/l]'^ 
of quasi-endomorphisms of degree a power of £ is dense in §2- For p = 2, we show 
that r is dense in an index 2 subgroup of §2- 
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Introduction 



Fix a prime p. Let F„ be the Honda height n formal group over Wpn. The 
endomorphism ring Op = End(Fn,) is the unique maximal order of the Qp- 
division algebra Dp of Hasse invariant 1/n [18], and the Morava stabilizer 
group E>n is the automorphism group Aut(F„) = . This group is a p-adic 
analytic group of dimension n^, and is of interest to topologists because it is 
intimately related to the nth layer of the chromatic filtration on the stable 
homotopy groups of spheres. We wish to understand the group §„ for n = 2 
from the point of view of elliptic curves. 



The authors were supported by the NSF. 



Preprint submitted to Elsevier Science 



2 February 2008 



Throughout this paper wc let C be a fixed supersingular elhptic curve defined 
over ¥p2. Let O = End(C) be the ring of endomorphisms of the curve C defined 
over Fp, and let D = O^Qhe the ring of quasi-endomorphisms. Because C is 
supersingular, it is known that D is the quaternion algebra over Q ramified at 
p and oo [12], and that O is a maximal order of D [23, 3.1], [4]. The reduced 
norm 

gives the degree of the quasi-endomorphism. Let C be the formal completion of 
C at the identity. Because C is supersingular, the formal group C is isomorphic 
to the Honda formal group F2 over ¥p. In fact, Tate proved that the natural 
map 

p : End(C) Zp ^ End((5) 
is an isomorphism [25]. The isomorphism p extends to an isomorphism 

p' :D0qQp^ Dp, 

making explicit the fact that D is ramified at p. The map p' is compatible 
with the reduced norm map on the division algebras D and Dp. 

Fix £ > 2 to be coprime to p. As the notation suggests, we intend for i to be 
another prime, but this is unnecessary for the results of this paper. Define a 
monoid 

r = {xe o[i/i] : N{x) e e^} c c»[l/£]^ 

Then F is actually a group: given an endomorphism of degree i'', the quasi- 
endomorphism £'''^(j) is its inverse, where is the dual isogeny. Note that if £ 
is prime, then T — 0[l/i]^. The group F may be regarded as being contained 
in the group S2 using the map p. The purpose of this note is to prove the 
following theorem. 

Theorem 0.1 Suppose that i is a topological generator of the group (re- 
spectively the group Z2 /{±1} forp = 2). For p > 2, the group F is dense in 
§2- For p = 2, the group F is dense in the index 2 subgroup S>2, which is the 
kernel of the composite 

S2^Z2^^(Z/8)7{1,£}. 

Let §^2 be the kernel of the reduced norm, so that there is an exact sequence 

1 ^ §Z2 ^ S2 ^ Z; ^ 1. 

Similarly, let F^ be the corresponding subgroup of F, so that there is an exact 
sequence 

1 ^ ^ F ^ £^ ^ 1. 
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(Wc will see in the proof of Theorem 0.1 that N is indeed surjcctive.) We 
denote by 8° the p-Sylow subgroup of S2, so that there is a short exact sequence 

1 ^ §° ^ §2 ^ f;,_, ^ 1. 

Similarly we let SI2 be the subgroup of S2 of elements of norm 1. Define A to 
be the subgroup fl §/2. Theorem 0.1 will follow from the following norm 1 
versions. Note that in the following theorem and corollary, £ is only assumed 
to be relatively prime to p. 

Theorem 0.2 The group A is dense in 8/3 . 

Corollary 0.3 The group is dense in §^2- 

We pause to explain the reason why these theorems are interesting from the 
point of view of homotopy theory. The p-component of the stable homotopy 
groups of spheres admits an especially rich filtration known as the chromatic 
filtration [19]. Work of Morava, Hopkins, Miller, Goerss, and Devinatz [14], 
[20], [8], [5] shows that the group §„ acts on the Morava i?-theory spectrum 
and the nth layer of the chromatic filtration is described by the homotopy fixed 
points E^f" of this action. The first chromatic layer is completely understood. 
The second chromatic layer is currently the subject of intense study. Goerss, 
Henn, Mahowald, and Rezk [7] produced a decomposition of £^2^^ at the prime 
3 in terms of finite homotopy fixed point spectra. The first author gave an 
interpretation of their work in terms of the moduli space of elliptic curves in 
[2]. In that paper, a spectrum Q{£) was introduced which was a shown to be 
a good approximation to £'2^^ for p = 3 and £ — 2. In future work [3], we 
will show that the spectrum Q{£) is the homotopy fixed point spectrum E^^. 
In particular. Theorem 0.1 shows that, in some sense, the spectrum Q{£) is a 
good approximation for £^2^^ for all p and suitable £. 

Gorbounov, Mahowald, and Symonds [9] studied dense subgroups of (S/ in 
their notation), and we prove Theorem 0.2 using their methods. In particular, 
it is shown in [9] that if p = 3, then there is a dense subgroup Z/3 * Z/3 
contained in S/2- [3]j it will be shown that for £ = 2, the group A is Z/3*Z/3. 
More generally, the groups A and admit explicit presentations as finite 
amalgamations for any p and £. 

The authors were alerted by the referee to the related work of Baker [1]. Baker 
studies, for primes p > 5, the category whose objects are supersingular elliptic 
curves over Fp, and whose morphisms are the morphisms of the associated 
formal groups. He then proves an analog of Morava's change of rings theorem: 
roughly speaking, he shows that the continuous cohomology of this category of 
supersingular curves computes the £'2-term of the i^r(2)-local Adams-Novikov 
spectral sequence converging to 71:^{Sk{2))- The chief difference between this 
paper and the work of Baker is that we insist on working only with the actual 
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rings of isogenies, and not their p-completions. 

In Section 1, we recall the relationship between maximal orders of D and 
the endomorphism rings of supersingular curves at p. In Section 2, we recall 
the homological criterion that is employed in [9] to detect dense subgroups of 
8/2 for p > 2. Wc then extend these methods to give an explicit criterion for 
density at the prime 2. We use these criteria in Section 3 to prove Theorem 0.1, 
Theorem 0.2, and Corollary 0.3. 

The first author would like to thank Hans- Werner Henn for pointing out to 
him that Theorem 0.1 was true in the case of p = 3 and ^ = 2. Thanks also 
go to Johan de Jong and Catherine O'Neil for helpful discussions related to 
this paper. 



1 Supersinguleir curves and endomorphism rings 

In this section we recall the correspondence between endomorphism rings of 
supersingular curves and maximal orders of D. Any two supersingular elliptic 
curves Ci and C2 over Fp are isogenous. In fact, Kohel proves the following 
proposition. 

Proposition 1.1 (Kohel [11, Cor. 77]) LetCi andC2 be supersingular el- 
liptic curves over ¥p. Then for all k ^ 0, there exists an isogeny : Ci ^ C2 
of degree . 

Let X*"* be the collection of isomorphism classes of supersingular curves C 
over ¥p. Given an isogeny : C — > C" of degree A^, we define a map 

: End(C") ^ End(C) Z[l/N] C D 

by 

i<p{a) = — ■4)oao(j). 

The map 6^ is a ring homomorphism and its image is a maximal order m. D. If 
0' : C — > C" is another choice of isogeny then it is easily seen that the maximal 
order ^/(End(C")) is conjugate to t0(End(C")). Let AId be the collection of 
conjugacy classes of maximal orders of D. Consider the map 

^■.X'' ^ Md 

given by e([C"]) = [.^(End(C"))]. 

Theorem 1.2 (Deuring [4], Kohel [12]) The map ^ is a surjection and 
the preimage of a conjugacy class [O'] of maximal orders consists of either 
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a single class represented by a curve with j -invariant in ¥p, or two classes 
represented by curves with distinct Galois-conjugate j -invariants in ¥p2. 

In the former case, the eUiptic curve can be defined over ¥p, and in the latter 
case it can only be defined over Fp2. 

We choose a preferred set of representatives of conjugacy classes in /Ad for the 
remainder of this note. Fix a choice of representative C of each isomorphism 
class [C] e X^^. Using Proposition 1.1, choose for each C an isogeny 

(pc'-C ^ C 

of degree Define Oc' to be the maximal order i^^, (End(C")). By letting 

C be the representative of its isomorphism class, and fixing (f)c = Idc, we can 
arrange that Oc — End(C). The following is immediate from Theorem 1.2. 

Corollciry 1.3 Every maximal order O' of D is conjugate to one of the form 
Oc for some C e X'' . 

Let O' be a maximal order of D. Then by Corollary 1.3, Cy{0') = y^^O'y 
is equal to Oc for some y & D and some supersingular elliptic curve C. 
The map t^o : C — > End(C) Z[l/£] extends to a norm-preserving ring 
isomorphism 

i^ocy-.o'® z[i/£] ^ c ® z[i/e] 

with inverse Cy-i o l^. In particular, we have the following. 

Corollary 1.4 Suppose thatx' is containedin a maximal order 0'[l/i] 
of D. Then there exists an element x e 0[l/£] with the same minimal poly- 
nomial as x' . 



2 A cohomological criterion for density 

In this section we recall some material from [9], but wc give this material a 
slightly different treatment. Our reason is that the authors of [9] use results 
of Riehm [21] on the structure of the commutator subgroups of Riehm's 
analysis, however, excludes the case of n = 2 and p = 2, and it turns out that 
this case has different behavior. 

The maximal order Op of Dp admits a presentation [18, Appendix 2] 

Op = ^{S)I{S'^ ^p,Sa^ aS). (2.1) 

Here W = W(Fp2) is the Witt ring with residue field Fp2, and a denotes the 
Galois conjugate (lift of the Probenius on Fp2) of an element a e W. Every 
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element of Op can then be written uniquely in the form 

a + bS 

for a, & e W. The group S2 = Op consists of all such elements where a ^ 
(mod p) . 

Let §2 be the p-Sylow subgroup of §2- The group §2 consists of all elements 
a + bS where a = 1 (mod p) . The subgroup SZg elements of §2 of norm 1 is 
the p-Sylow subgroup of SZ2- 

Suppose that G is a pro-p-group. Let G* be the Frattini subgroup of G, which 
is the minimal closed normal subgroup that contains G^ and [G, G] . Then we 
have the following theorem. 

Theorem 2.1 (Koch [10], Serre [22]) Suppose that H is a subgroup of a 
pro-p-group G. Then H is dense in G if and only if the composite 

H^G^ G/G* = Hl{G] Fp) 

is surjective. 

Corollary 2.2 Let {ai} form an ¥p-basis of the continuous group homomor- 
phisms Hom'^(G', Fp) = H^{G;¥p). Then H is a dense subgroup of G if and 
only if the composite 

H^G^^^Wp 

i 

is surjective. 

Every element x e 83 may be written uniquely in the form 

{1 + pt2 + p\ + ■■■) + {ti + pt3 + p% + ■■ ■)S, (2.2) 

where = ti(x) are Teichmiiller lifts of elements of Fp2 in W. This is equivalent 
to saying that the elements t^ satisfy if — t^. The coefficients t^ give rise to 
continuous functions 

: §2 — ^ Fp2. 

Ravenel [16] uses this presentation to express §2 ^ the Fp2-points of a pro- 
affine group scheme Spec5'(2), where S{2) is the Morava stabilizer algebra 

S{2)^¥p[ti,t2,ts,...]/{tf ^ti). 

The algebra S{2) is a Hopf algebra. Equation (2.2) gives an isomorphism of 
groups 

§° ^ Spec 5(2) (Fp2). 
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Ravenel shows that this isomorphism gives an isomorphism in cohomology: 

= Exts(2)(Fp,Fp) ®FpFp2. 

The Ext group is taken in the category of 5'(2)-comodules. 

For an arbitrary element a; G expressed as in equation (2.2), express the 
norm N{x) G by 

N{x) = l+psi+p^S2H , 

where the elements Sj = Si{ti,t2, ■ ■ ■) are polynomial functions of the U, and 
sf = Si are Teichmiiller lifts of elements of Fp (compare with the discussion 
preceding Theorem 6.3.12 of [18]). Then we may define a quotient Hopf algebra 

Sl{2) = S{2)/{si{h,h,...)), 

whose Fp2 points give the subgroups SZ^ which 

i^;(§/°;Fp2) = H*{Sl{2)) Fp2. 

The following computation is obtained from combining Theorems 6.2.7 and 
6.3.12 of [18]. 

Lemma 2.3 For p> 2, we have 

H\Sl{2))^¥p{hi,o,hi,i}, 

where hi^i is represented by the element [ti ] in the cobar complex for Sl{2). 
Corolleiry 2.4 For p> 2, the group 

Hl{Sf^;¥p2) ^ Hom'=(§/°,Fp2) 
has an ¥p2-basis consisting of the continuous homomorphisms 

ti,t^ '. §2 — ^ Fp2 . 

Corolleiry 2.5 (Gorbounov-Mahowald-Symonds [9]) For p > 2, a sub- 
group H of dense if and only if the composite 

H^Sl^ Fp2 

is surjective. 
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Proof. Let uj G Fp2 be a primitive ~ 1 root of unity. We may compute the 
cohomology with Fp coefficients by taking Gal — Gal{¥p2/¥p) fixed points, 
and obtain 

Hom'=(§°, ¥p) = Hom^(§°, F^a)^"'. 
(The Galois group only acts on the coefficient group and not on S"-) Here the 
Probenius a E Gal acts hy a{ti) — ti for i e Z/2. An Fp-basis for this 
fixed-point module is given by the pair of homomorphisms 

h + tl,LJti+LjPtl : §^ ^ Fp2. 

The result now follows from Corollary 2.2. □ 

We now address the case where p — 2. 
Lemma 2.6 Let p = 2. Then we have 

H\Sli2))^¥2{hi,o,h,,i,hs,o,hs,i}, 
where the generators are represented in the cobar complex for Sl{2) by 

h,i^[it3 + tit2f]. 

Proof. We follow the same approach of [18, 6.3] using the May spectral se- 
quence. (It is important to refer to the second edition of [18]; the previous 
version, as well as [17], had an error in the restriction formula in the restricted 
Lie algebras L{n).) The May spectral sequence for Sl{2) takes the form 

E'^'* = H'{E^Sl{2)) ^ H\Sl(2)). 

The E'l-term may be regarded as the Koszul complex for {E^Sl{2))* 

El'* = ¥2[hij : i>l,je 1/2\/{h2k,j + h2k,j+i), 

with differential 

We see that the only elements of Ei' that persist to E2' are /ii,0; ^1,1 > ^3,0 ? 
and /i3,i. 

Wc will show that these elements are permanent cycles in the May spectral 
sequence by explicitly producing cocycles in the cobar complex that they de- 
tect. By taking the images of the formulas for the coproduct on BP^BP in 
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[6], we arrive at the following formulas for the coproduct in Sl{2). 

A(ti) = ti ® 1 + 1 ® ti, 

A{t2) =t2^1+h®tl + l®t2, 

A(t3) ^t3<^l+ti^tl + t2<^ti+tl^tl + l^t3. 

Using the relation 

Sl=t2+tl + tl = 0, 

these formulas may be used to verify that the cobar expressions in the state- 
ment of the lemma are permanent cycles. □ 

Corolleiry 2.7 For p — 2, the group 

Hl{Sll;¥^) ^Hom'=(§/°,F4) 
has an F^-basis given by the continuous homomorphisms 

ti, tl, t3 + tit2, (t3 + trt2f : ml ^ F4. 

Corollary 2.8 For p = 2, a subgroup H of S/^ dense if and only if the 
composite 

^ §° ^i^^^^ F4 © F4 

is surjective. 

Proof. Let a; e F4 be a primitive 3rd root of unity. Just as in Corollary 2.5, 
we compute the cohomology with F2 coefficients by taking Gal — Ga/(F4/F2) 
fixed points, and obtain 

Hom'=(§°,F2) = Hom'=(§°,F4)^"'. 

(As before, the Galois group only acts on the coefficient group.) An F2-basis 
for this fixed-point module is given by the homomorphisms ti +tl, outi + ou'^tl, 
ts + tit2 + (ts + ^l^2)^ and ^(^3 + tits) + uj^{t3 + ht2f. □ 



3 Proof of Theorem 0.1, Theorem 0.2, and Corollary 0.3 

We will make use of the following proposition, which is a special case of Propo- 
sition 9.19 of [24]. 

Proposition 3.1 Suppose that f{x) = + aix + a2 is a manic polynomial 
over Q that is irreducible over Qp and R. Then there exists an a in D with 
f{a) = 0. If the elements a, are integral over R G Q, then a lies in a maximal 
R- order of D. 
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Proof of Theorem 0.2 for p > 2. We will use Proposition 3.1 to produce 
elements Xi, X2 in A so that ti{xi), ti{x2) form an Fp basis of Fp2. Corollary 2.5 
then yields the result. 

Choose integers ri and r2 such that ^ (mod p), and so that ri is a square 
and r2 is not a square in Fp. Let 

^ -PU - 2 

~ £mip{p-l) ' 

where the integers are chosen sufficiently large so that 

< 4. (3.1) 

We claim that the polynomials 

fi{x) = x'^ + aiX + 1 

are irreducible over R and Qp. It suffices to check that the discriminants Aj = 
— 4 are not squares in each of these fields. Condition (3.1) guarantees that 
A.; is not a square in M. Over Qp we note that Aj lies in Zp, so it suffices to 
check that Aj is not a square in Z/p^. Because is congruent to 1 in 

Z/p^, we have 

Aj = 4pri (modp^). 
As Ti is not congruent to (mod p), Aj is not a square in Z/p^. 

Applying Proposition 3.1, we see that there exist Xi in D so that fi{xi) = 0. 
The elements Xi satisfy monic quadratics over Z[l/£], and so these elements 
are contained in maximal Z[l/£] orders Oi[l/i] of D. Applying Corollary 1.4, 
there exist elements Xi e 0[l/£] such that 

fi{xi) = x\ + a^Xi + 1 = 0. (3.2) 

The Xi satisfy N{x^ — 1. Therefore, we conclude that the elements 
contained in the group F^. 

The images of the ctj in Qp lie in Zp, so the images of the Xi in Dp lie in Oy. 
Write Xi in the form 

Xj = Oj + hiS 

for Oj, hi e W. Reducing equation (3.2) modulo the ideal (5"), we see that 

x] - 2a;j + 1 = a- - 2aj + 1 = (mod S). 

We conclude that = 1 (mod p). This implies that the elements Xi actually 
lie in A, and their images in Op are of the form 

Xi = (l+pa^ + 6j5) 
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for a[ e W. 



Equation (3.2) implies that the reduced trace of Xi is given by 

Tr{xi) = 2+pTr{a'^ = -a^, (3.3) 

whereas the reduced norm is given by 

N{xi) = l+pTr{a'i)+p^N{a'i) -pN{bi) = 1. (3.4) 

Substituting the expression for Tr{a'j) given by equation (3.3) gives 

rv - -I- 2 

N{h)=pN{a'^-^j-. (3.5) 

Note that ccj = —2 (mod p). Reducing equation (3.5) modulo p yields 

N{ti{xi))=N{bi)=rie¥p. 

If ti{xi) and ti{x2) were ¥p linearly dependent in Fp2, their norms would lie 

in the same quadratic residue class. The were chosen so that this docs not 
happen, so we conclude that {ti{xi),ti{x2)} forms a basis of Fp2. Therefore, 
by Corollary 2.5, the subgroup A is dense in S/g- ^ 



Proof of Theorem 0.2 for p = 2. The proof is similar to the proof for p > 2, 
but more involved. There is precisely one isomorphism class of supersingular 
elliptic curve C at p = 2. It follows that D has one conjugacy class of maximal 
order. By checking the invariants of the division algebra D, it can be shown 
[15] that D is of the form of the rational quaternions 

Q(^,j)/(^' = / = -i,u = -ii)- 

We may therefore assume that End(C) G D is the maximal order O generated 
by 

{uj,i,j,k}, 

where k — ij and u — l±l±i±^. Note that — 1. The automorphism group 
Aut C = End(C) ^ is the binary tetrahedral group A4 of order 24 given by the 

semidirect product Qs >^ Cs- The cyclic group C3 is generated by uj and the 
quaternion group Qs is generated by i and j. We have a;ia;^ = j and utjcu^ = k. 

Let T be the element i-jeO. Then we have = -2 and Tuj = u^T. The 
Witt ring W = W(F4) will be identified with the subring 

Z2[UJ] C Z2 - 02. 

Let z G W be an clement of norm —1. Then the element S = zT in O2 has the 
property S"^ = 2 and Sa = aS for a G W. This makes explicit the presentation 
of O2 in terms of S and W given in equation (2.1). 
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Claim 1: Let a. b.E W be such that x = {1 + a) + bS G O2 has minimal 
polynomial + 1. Then we must have a = (mod 2) and 1^2 (&) = 0. 



Proof of Claim 1: In order for x to have this minimal polynomial, we must 
have the following: 



Tr{x) = 2 + Tr{a) = 0, (3.6) 
Nlx)^l + Trla) + N(a)-2N(b)^l. (3.7) 

Reducing equation (3.6) mod 4, we see that 

Tr{a) = 2 (mod 4). 

Substituting this into equation (3.7) and reducing mod 2, we see that N{a) = 
(mod 2). Write a = 2a'. Then we have N{a) = 4N{a'). Therefore, when we 
reduce equation (3.7) modulo 4, we get N{b) = 1 (mod 2), and we conclude 
that U2{b) = 0. 



Claim 2: Suppose a, 6 G W and a E Z2 are such that x = {1 + a) + bS E O2 
has minimal polynomial x^ + ax + 1. Then if a satisfies a = 6 (mod 16), we 
must have a = (mod 2) and 1^2 (&) = 1. 



Proof of Claim 2: Because a = 6 (mod 16), we can write 2 + a — 47, where 
7 = 2 (mod 4). 

In order for x to have this minimal polynomial, we must have Tr{x) = —a 
and N{x) = 1. As a result, we have the following: 



Tr{a) = -47, (3.8) 
7V(a) = 27V(6) + 47. (3.9) 

Reducing equation (3.9), we find that 

N{a) = 2N{b) (mod 4). (3.10) 

This shows that N{a) = (mod 2). Writing a = 2a' and substituting back 
into equation (3.10), we find that N{b) = (mod 2), so 6 = 2b'. 

Re-expanding equations (3.8) and (3.9) gives the following: 
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rr(a') = -27, 
N{a')^2N{b')+^. 



(3.11) 
(3.12) 



From equation (3.11), we find Tr{a') = (mod 2). Write a' = ai + 020; G W. 
Because Tr{a') — 2ai — 02 = (mod 2), we find 02 = (mod 2). As a result 
we can write a' = u + vd for u,v & Z2 and d = = 2a; + 1. We then have 
N{a') — + 3v^. Therefore, equation (3.12) can be reduced as follows: 

u'^ -v^ = 2N{b') + 2 (mod 4). (3.13) 

However, the equation u"^ — = 2 (mod 4) has no integer solutions. In order 
for equation (3.13) to hold, we must have N(b') = 1 (mod 2), or equivalently 

t/2(&) = l + i/2(&') = 1. 

Claim 3: Given x e SZ^) ^' — '^'^xu. Then x' is in SZ^ ^^^d we have 




ti(a;) i even, 
ujti{x) i odd. 



This claim is immediate from the definition of the functions ti given in Sec- 
tion 2. 

We now complete the proof of Theorem 0.2 for the case p = 2. Consider the 
polynomial 

6 

f{x) ^x^ + ^x + l 

with discriminant A = 4(9/£® — 1). We have that A < 0, so the polynomial 
/ is irreducible over R, and / is irreducible over Z2 because 1^2 (A) is odd. By 
Proposition 3.1 and Corollary 1.4 there exists an element y of 0[l/£] so that 
f{y) — 0. Because N{y) — 1, the element y lies in F^. 

In order to show that A satisfies the hypotheses of Corollary 2.8, we claim 
that the elements 

hk,y,y' = uj^yuj 
lie in A, and their images under the homomorphism 

h e {ts + tit2) : S/2 ^ F4 e F4 
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form an F2-basis of F4 © F4. Claims 1,2, and 3 imply that these elements do 
lie in A, and the functions ti evaluated on them satisfy 

ti{i) ^ 0, 

ti{y) = o, 
ti{y') = o, 
hiy) 7^ 0, 

These conditions are sufficient to conclude that their images give a basis. 
Corollary 2.8 now implies that A is dense in □ 

Proof of CorollEiry 0.3. There is a short exact sequence 

1 — > S/2 — ^ — ^ — > 1, 

where the cyclic group Cp+i is the group of elements of F^a = {Op/{S))^ of 
Fp-norm 1. It therefore suffices to show that we can lift the generator of Cp+i 
to an element of F^. Let y G F^2 be a generator of the norm 1 subgroup, with 
minimal polynomial 

f{x) — -\- ax 

over Fp. Let a be an integer that reduces to a modulo p, and define a ~ 
m is chosen sufficiently large so that < 4. Then the poly- 
nomial 

/(x) = + ax + 1 

is irreducible over Qp and R. Just as in the proof of Theorem 0.2, Proposi- 
tion 3.1 and Corollary 1.4 may be used to show that there exists an element 
y e 0\yl(\ so that y reduces to a generator of Cp+i. Because y has norm 1, it 
lies in □ 

Proof of Theorem 0.1. Assume that p > 2. In light of Corollary 0.3 and 
the short exact sequence 

1 ^ §/2 ^ S2 ^ ^ 1, 

we must show that there exists an element a; of F so that A^(,t) is a topological 
generator of Z^. Because i was assumed to be a topological generator, it 
suffices to show there exists an x so that Nix) — i. By Proposition 1.1, for m 
sufficiently large there exists an cndomorphism a G End(C) of degree £2m+i 
Then the element x = i^"^a G F has norm i. The argument for p = 2 is 
identical, except that we use the short exact sequence 

1 ^ §^2 ^ S2 ^ Z27{±1} ^1. □ 
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